117.14.149.192

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
117.14.149.159	attackspam	Unauthorized connection attempt detected from IP address 117.14.149.159 to port 9999 [T]	2020-01-10 08:22:57
117.14.149.239	attackbots	Unauthorized connection attempt detected from IP address 117.14.149.239 to port 2053	2019-12-31 06:29:30
117.14.149.210	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54311a65ec56e4cc \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:44:12

类型

评论内容

时间

117.14.149.159

attackspam

Unauthorized connection attempt detected from IP address 117.14.149.159 to port 9999 [T]

2020-01-10 08:22:57

117.14.149.239

attackbots

Unauthorized connection attempt detected from IP address 117.14.149.239 to port 2053

2019-12-31 06:29:30

117.14.149.210

attackbotsspam

The IP has triggered Cloudflare WAF. CF-Ray: 54311a65ec56e4cc | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 04:44:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.14.149.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55290
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.14.149.192.			IN	A

;; AUTHORITY SECTION:
.			118	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 01:33:50 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

192.149.14.117.in-addr.arpa domain name pointer dns192.online.tj.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
192.149.14.117.in-addr.arpa	name = dns192.online.tj.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
120.11.17.17	attack	SP-Scan 8080 detected 2020.08.17 19:49:32 8080 blocked until 2020.10.06 12:52:19	2020-08-22 03:50:35
103.229.84.226	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-08-22 03:34:14
83.174.237.109	attack	Unauthorized connection attempt from IP address 83.174.237.109 on Port 445(SMB)	2020-08-22 03:39:06
165.227.203.162	attackspambots	reported through recidive - multiple failed attempts(SSH)	2020-08-22 03:39:55
200.199.227.195	attackspam	2020-08-21 12:37:22.592459-0500 localhost sshd[16833]: Failed password for invalid user ykl from 200.199.227.195 port 38716 ssh2	2020-08-22 03:42:22
43.230.159.163	attack	Unauthorized connection attempt from IP address 43.230.159.163 on Port 445(SMB)	2020-08-22 03:47:07
121.48.164.31	attackspam	Aug 21 14:19:26 myvps sshd[19637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.48.164.31 Aug 21 14:19:28 myvps sshd[19637]: Failed password for invalid user vna from 121.48.164.31 port 38646 ssh2 Aug 21 14:34:09 myvps sshd[28838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.48.164.31 ...	2020-08-22 03:24:29
185.210.218.206	attackbotsspam	[2020-08-21 15:30:33] NOTICE[1185] chan_sip.c: Registration from '' failed for '185.210.218.206:64961' - Wrong password [2020-08-21 15:30:33] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-21T15:30:33.463-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1227",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.210.218.206/64961",Challenge="5eec28e4",ReceivedChallenge="5eec28e4",ReceivedHash="8b06ab5ddad2d9d7f81d48514d9ca927" [2020-08-21 15:31:00] NOTICE[1185] chan_sip.c: Registration from '' failed for '185.210.218.206:60461' - Wrong password [2020-08-21 15:31:00] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-21T15:31:00.766-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9933",SessionID="0x7f10c4245bd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.210 ...	2020-08-22 03:35:32
217.115.87.170	attackbots	1598011281 - 08/21/2020 14:01:21 Host: 217.115.87.170/217.115.87.170 Port: 445 TCP Blocked	2020-08-22 03:29:41
183.82.107.120	attackspam	Unauthorized connection attempt from IP address 183.82.107.120 on Port 445(SMB)	2020-08-22 03:19:46
103.200.22.187	attackspambots	103.200.22.187 - - [21/Aug/2020:19:51:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.200.22.187 - - [21/Aug/2020:19:51:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.200.22.187 - - [21/Aug/2020:19:51:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-22 03:23:01
220.134.232.42	attackbotsspam	" "	2020-08-22 03:17:52
197.47.66.89	attackspambots	Telnet Server BruteForce Attack	2020-08-22 03:12:37
14.98.44.238	attack	Unauthorized connection attempt from IP address 14.98.44.238 on Port 445(SMB)	2020-08-22 03:17:02
213.136.89.190	attack	srvr1: (mod_security) mod_security (id:942100) triggered by 213.136.89.190 (DE/-/praag.co.za): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:01:32 [error] 482759#0: 840080 [client 213.136.89.190] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801129218.382359"] [ref ""], client: 213.136.89.190, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%29+OR+EXP%28~%28SELECT+%2A+FROM+%28SELECT+CONCAT%280x76356a383853%2C%28SELECT+%28ELT%282836%3D2836%2C1%29%29%29%2C0x76356a383853%2C0x78%29%29x%29%29--+ML7a HTTP/1.1" [redacted]	2020-08-22 03:16:14

最近上报的IP列表

117.14.148.34	117.14.151.193	117.14.151.25	117.14.154.72
117.14.155.157	117.14.155.78	174.48.49.47	117.14.156.187
117.14.156.93	117.14.159.107	117.14.159.117	117.14.159.158
117.140.44.214	117.140.96.219	117.141.170.141	15.251.138.240
117.143.107.250	117.176.207.97	117.176.229.63	117.176.235.94